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REMARKS 



Claims 1 to 100 were pending in the application at the 
time of examination. Claims 1 to 100 stand rejected as 
obvious . 

Applicants have amended Claims 1, 25, 49, and 73 to more 
positively recite the invention and the cooperation between the 
elements . 

Claim 6, 37, and 61 are amended to correct grammatical 
errors . 

Claims 7, 8, 11, 17, 31, 32, 55, 56, 79, 80, 90 and 91 are 
amended to correct antecedent basis informalities. 
Claims 97 to 100 are cancelled. 

Claims 1 to 100 stand rejected under 35 U.S.C. § 103(a) as 
being unpatentable over U.S. Patent No. 6,83 9,843, hereinafter 
referred to as Bacha, in view of U.S. Patent No. 5,572,582,, 
hereinafter referred to as Riddle. 

Applicants respectfully traverse the obviousness rejection 
of each of Claims 1, 25, 49 and 73. Applicants respectfully 
note that in each of this claims the structure and/or method is 
on a card device. In contrast, both Bacha and Riddle describe 
computer systems that are networked. Neither Bacha nor Riddle 
is concerned with a resource constrained device such as the 
card device in the instant invention. The rejection has failed 
to cite any teaching or suggestion that processes that utilize 
the memory and computing resources of servers and work stations 
could be implemented on a card device. Applicants respectfully 
submit that it is well known in fact that such processes on 
such devices typically cannot be ported directly to card 
devices because of the vast differences in processing and 
memory resources. Accordingly, it is respectfully submitted 
that one of skill in the art in considering the combination of 
Bacha and Riddle would not consider such a combination to teach 
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or suggest anything with respect to the card device recited in 
these claims. 

Further, the rejection cited Bacha, Col. 2 line 51 to Col 
3, line 24 as suggesting the security manager, application 
program, and capabilities list. This portion of Bacha stated: 

Accordingly, in one aspect, the present invention is directed 
to secure electronic data storage and retrieval system, that consists 
of a data repository, a repository manager for managing storage and 
retrieval of encrypted electronic data of a depositing computer into 
and out of the data repository, and an agent program of the 
depositing computer. The agent program is accessible to the 
repository manager whether the depositing computer is online or off- 
line. The agent program also has means to decrypt, on authentication 
of a requesting computer, the encrypted electronic data of the 
depositing computer retrieved from the data repository on request of 
the requesting computer. Preferably, the repository manager can 
digitally sign the encrypted electronic data prior to storage in the 
data repository, and then forward a copy of the signed encrypted data 
to the agent program, so that the agent program can verify against 
the signed encrypted data, the retrieved encrypted electronic data 
following decryption. 

In another aspect, the present invention provides a system and 
method for securely authenticating user access to electronic data 
stored in a data repository managed by a repository manager unrelated 
to a source of the data, in which an access control list of user 
authorizations is associated with the electronic data when stored in 
the data repository. The source is responsible for updating the 
access control list, and maintains evidence of the current access 
control list. Evidence of the current access control list is also 
provided to any user computer which has effected the update. The 
source verifies that the updated access control list stored with the 
electronic data in the data repository is accurate before releasing 
the data to the requesting computer 
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This section describes a repository manager for a data 
repository and an agent program. Applicants note that in an 
obviousness rejection, the MPEP requires that the reference be 
considered as a whole. 

Bacha, Col. 5, line 36 to Col. 6, line 3 describes that 
this agent program and repository manager are part of a 
document repository that includes an application server and a 
vault controller. Controlling access to documents on a server 
in a document repository teaches or suggests nothing with 
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respect to controlling access to resources needed by an 
application program executing on a card device as recited in 
these claims. The cited teaching in Bacha fails to suggest or 
disclose an executing application program on a card device 
requesting access to a resource, a security manager or a 
capabilities list as recited in these claims. 

Moreover, since a server is used by Bacha, there has been 
no showing of how such a server could be implemented on a card 
device. Use of a server teaches away from any process on a 
card device. Therefore, the combination of references fails to 
render each of Claims 1, 25, 49 and 73 obvious for multiple 
reasons. Applicants respectfully request reconsideration and 
withdrawal of the obviousness rejection of each of Claims 1, 
25, 49 and 73. 

Claims 2 to 24 depend from Claim 1 and so distinguish over 
the .combination of references for at least the same reasons as 
Claim 1. Applicants respectfully request reconsideration and 
withdrawal of the obviousness rejection of each of Claims 2 
to 24 . 

Claims 26 to 48 depend from Claim 25 and so distinguish 
over the combination of references for at least the same 
reasons as Claim 25. Applicants respectfully request 
reconsideration and withdrawal of the obviousness rejection of 
each of Claims 26 to 48. 

Claims 50 to 72 depend from Claim 49 and so distinguish 
over the combination of references for at least the same 
reasons as Claim 49. Applicants respectfully request 
reconsideration and withdrawal of the obviousness rejection of 
each of Claims 50 to 72. 

Claims 74 to 96 depend from Claim 73 and so distinguish 
over the combination of references for at least the same 
reasons as Claim 73. Applicants respectfully request 
reconsideration and withdrawal of the obviousness rejection of 
each of Claims 74 to 96 . 
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Claims 1 to 96 remain in the application. Claims 1, 6, 7, 
8, 11, 17, 25, 31, 32, 37, 49, 55, 56, 61, 73, 79, 80, 90 and 
91 are amended. Claims 97 to 100 were canceled. For the 
foregoing reasons, Applicant (s) respectfully request allowance 
of all pending claims. If the Examiner has any questions 
relating to the above, the Examiner is respectfully requested 
to telephone the undersigned Attorney for Applicant (s) . 



CERTIFICATE OF MAILING 
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United States Postal Service with sufficient postage as first class mail 
in an envelope addressed to: Commissioner for Patents, P.O. Box 
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Attorney for Applicant(s) 
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